TL;DR - impacket-programming-manual is a book-length, source-level guide to writing your own domain-penetration scripts on top of impacket, rather than another walkthrough of example flags.

Almost every public exploit for recent Active Directory vulnerabilities was built directly on impacket modules. Yet most articles only explain how to run the example scripts. This manual fills the gap the other way around: it walks the source tree module by module, so when the next domain vulnerability drops you can grab impacket and write your own PoC.

What is inside

  • Nine chapters across six parts, roughly 5,400 lines
  • LDAP, Kerberos (krb5), GSS-API and SPNEGO
  • DCE/RPC - NDR, endpoint mapper, transports, and 20+ MS protocol modules
  • DCOM and WMI - dcomrt, oaut, comev, scmp, vds, wmi
  • Support libraries - SMB2/3, DPAPI, NTDS, TDS
  • The impacket 0.12 to 0.14 additions: ICPR, GKDI, NEGOEX, RAA, SCMR, plus acl and dpapi_ng
  • Case studies including BadSuccessor (CVE-2025-53779) and CVE-2025-33073

Highlights

  • Source-level, not example-level: each chapter reads the actual impacket source
  • Annotated, step-numbered code excerpts for long listings
  • Quotes verified against the current fortra/impacket master

English and Chinese editions, each with a PDF.

Repo: https://github.com/lupingQAQ/impacket-programming-manual